From thomas at roundcube.net Sun Dec 27 23:11:13 2020 From: thomas at roundcube.net (Thomas Bruederli) Date: Sun, 27 Dec 2020 23:11:13 +0100 Subject: [Roundcube Announce] Security updates 1.4.10, 1.3.16 and 1.2.13 released Message-ID: Dear subscribers We just published security updates to the stable version 1.4 and the LTS versions 1.3 and 1.2 of Roundcube Webmail. They all contain fixes to a recently reported stored XSS vulnerability found and kindly reported by Alex Birnberg (birnbergalex at gmail.com). The 1.4.10 release also contains a few general improvements from our issue tracker. See the full changelogs in the release notes on the Github download pages for the updated versions: https://github.com/roundcube/roundcubemail/releases/tag/1.4.10 https://github.com/roundcube/roundcubemail/releases/tag/1.3.16 https://github.com/roundcube/roundcubemail/releases/tag/1.2.13 We strongly recommend to update all productive installations of Roundcube with these new versions. Download them from https://roundcube.net/download/ Best wishes and a happy new year! Alec & Thomas -------------- next part -------------- An HTML attachment was scrubbed... URL: